Support for TPM as a Keystore

[sumantfordev]

is there an option to store certs generated in TPM?

[tedescn]

For transparancy, I've not done this, but would be interested in your lessons learnt. Did you checkout the the "-engine" switch is supported based on the help info., where you are trying to achieve something similar to the first command at tpm2-software/tpm2-tss-engine#39.

The second command indicates how the initial csr may be generated with the "-engine" switch based on a private key initially generated within the TPM.

I suspect this is something I should be looking into also. Note again, I've personally not tested the -engine switch.

Regards
Nigel